The following Privacy Policy governs the online information collection practices of TUX Services, Inc. ("Company," "we" or "us"). It outlines the types of information that we gather about you while you are using our applications at www.withtux.com (the "Site") and the ways in which we use this information. TUX Services, Inc. is a web-based SaaS platform for publicly traded companies to manage their share registry, dividend plans, proxy voting, and compliance. Our application helps customer companies keep records of who owns their securities (e.g., shares, bonds, etc.). We also enable the investors in these companies who have created TUX accounts to manage their investments via the application. Collectively, we refer to the customers and investors as "Users" of the web services and product offerings ("Service(s)") provided by TUX Services, Inc. We process their data in accordance with the applicable laws and regulations following industry best practices.

1. Purpose and Scope

This Privacy Policy applies primarily to information that we collect online; however, it may apply to some of the data that you provide to us offline and/or through other means (e.g., via telephone, or through the mail). The Privacy Policy documents and describes how our organization collects information from all our Users of our Services. The use of information collected on behalf of our Users is governed primarily by our contract for the engagement with them and the privacy policies governing their organization. We are not accountable for the privacy policies and practices undertaken by our users or any other third parties. Some information is collected through the use of cookies, web beacons, and tracking technologies. Please refer to the cookie policy for more details on the types of cookies being used.

2. How We Collect Data About You

We may collect different data from or about you depending on how you use the Site. We receive personal information about you from third parties such as issuers, brokers, or other intermediaries.

2.1. Data Provided by Registered Users

When you create an account or log in to your account, we collect personal information such as your first name, last name, email address, phone number, date of birth, social security number, mailing address, and proof of identity and address.

2.2. Data Collected Through Automated Means

We collect technical data about your computer or device, like device type, operating system, and IP address to improve the delivery of our web pages and measure traffic on the Site. The collection of data will also depend on the individual settings of your device and software. Refer to the policies of your device manufacturer or software provider to learn about information they might share with us.

2.3. Data Collected During Transactions

Based on the types of services requested, TUX Services, Inc. collects information such as the type of service requested, order details, payment and transaction information, and the date and time the service is provided.

3. The Types of Information We Collect and Store

We may collect personal and sensitive personal information about you and store this information in connection with the provision and fulfillment of our services to you. Personal information may include:

• First name and last name

• Email address

• Location

• IP Address

• Phone number(s)

• Date of birth

• Tax Identification Number (e.g., Social Security Number)

• Mailing address(es)

• Proof of identity and address (e.g., Driver's license, Passport, likeness/liveness)

• Securities transaction information and legal documents

• Banking information

4. How We Use Your Personal Information

The above personal information may be used for the following purposes:

• To respond to your requests

• To manage our relationship with you

• For internal record-keeping as required legally for the purposes of acting as Transfer Agent for issuers

• To provide you with authorization to log in and use your user account

• To verify your identity

• To maintain correct and up-to-date information about you

• To identify you as a contracting party

• To improve our website

• To enable automated handling of the subscriptions

• To otherwise provide the services to you

• To comply with our legal or statutory obligations

5. Who Has Access to Your Data Within Our Organization?

Within our organization, access to your data is limited to those persons who require access to provide you with the Products and Services, to contact you, and to respond to your inquiries and requests. Those staff members may be on teams such as marketing, events, development, executive, customer support, and other functions at TUX Services, Inc. Employees only have access to data that is relevant to their team, on a 'need to know' basis.

6. Who Do We Share Your Data With Outside Our Organization and Why?

6.1. Processors

We may use service providers & third parties for operating and improving the Site, to assist with certain functions such as identity verification, payment processing, email transmission, data hosting, third-party solutions for marketing and analytics, and some aspects of our technical and customer support. We take measures to ensure that these service providers access, process, and store information about you only for the purposes we authorize, through the execution of Data Processing Agreements or Addenda.

6.2. Authorities

We may access, preserve, and disclose information about you to third parties, including the content of messages, if we believe disclosure is in accordance with or required by applicable law, regulation, legal process, or audits. We may also disclose information about you if we believe that your actions are inconsistent with our Terms of Service or related guidelines and policies, or if necessary to protect the rights, property, or safety of, or prevent fraud or abuse of, the Company or others.

6.3. Transfer of Business

If we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, personal information could be one of the assets transferred to or acquired by a third party.

7. Why and For How Long Do We Store Information We Collect From You?

We retain certain information collected from you while you are a user of our application, and in certain cases where you have deleted your account, for the following reasons:

• To authenticate your account and allow you to use our products and services

• To ensure that we do not communicate with you if you have asked us not to

• To provide you with payments, if entitled

• To better understand the traffic to our platform and application to provide all members with the best possible experience

• To detect and prevent abuse of our platform, illegal activities, and breaches of our Terms of Service

• To comply with applicable legal, tax, or accounting requirements

We retain user data for as long as necessary for the purposes described above, which means that we retain different categories of data for different periods depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.

8. Security

We implement a variety of administrative, managerial, and technical security measures to help protect your personal information. Our Company has various internal control standards which relate specifically to the handling of personal information. These include certain controls to help safeguard the information we collect online. Our employees are trained to understand and comply with these controls, and we communicate our Privacy Policy practices and guidelines to our employees. However, while we strive to protect your personal information, you must also take steps to protect your information. We urge you to take every precaution to protect your personal information while you are on the Internet.

9. Your Rights Under GDPR

If you are within the EU, you have certain rights, including:

• Right to Access: Obtain a copy of your personal data, as well as other supplementary information.

• Right to Restrict Processing: Restrict the processing of your personal data in certain circumstances.

• Right to Rectification: Have any incomplete or inaccurate information we hold about you corrected.

• Right to Object to Processing: Stop or prevent us from processing your personal data, especially if we rely on legitimate interest as the legal basis.

• Right to Erasure: Ask us to delete or remove personal data when it is no longer necessary for the purpose it was originally collected or processed.

To exercise your rights, you can contact us at privacy@withtux.com.

10. Your Rights Under CCPA

Users who are California residents have certain rights under the California Consumer Privacy Act ("CCPA"):

• Right to Know: Request to know more about the categories and specific pieces of personal information we have collected about you and access a copy of your personal information.

• Right to Deletion: Request deletion of personal information that we have collected about you where we are legally able to do so.

• Right to Non-Discrimination: We will treat you like all other users if you choose to exercise any of your rights under CCPA.

• Right to Opt-Out: Opt-out of the sale of your personal information. We do not sell personal information. However, the Service Providers we partner with may use technology on the Service that "sells" personal information as defined by the CCPA.

To exercise any of these rights under CCPA, please email privacy@withtux.com. For more information about your rights and how to exercise them, visit our Data Subject Request Policy.

11. Your Rights as a Resident of Other States with Additional Privacy Rights

You may have certain additional rights regarding your personal information. For our clients that meet the definition of a business or data controller under relevant state privacy regulations, TUX Services, Inc. will assist those clients, to the extent possible, with the fulfillment of their obligations to respond to your requests. These may include the right to access personal information that has been collected about you; delete your personal information; restrict our use of your personal information; correct your personal information, and opt-out from the sale of your personal information (if applicable).

12. Our Policy Concerning Children and Their Data

Our application and platform are NOT directed to children under the age of sixteen, and we do not knowingly collect personally identifiable information from children or distribute such information to third parties. We screen users who wish to provide personal information to prevent children from providing such information. If we become aware that we have inadvertently received personally identifiable information from a child, we will delete such information from our records. If we change our practices in the future, we will obtain prior, verifiable parental consent before collecting any personally identifiable information from children.

13. Links to Other Sites

Our application and platform may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. Third parties are under no obligation to comply with this Privacy Policy with respect to personal data that you provide directly to those third parties or that those third parties collect for themselves. We do not control the third-party sites that may be accessible through our Services. This Privacy Policy does not apply to information you provide to third-party sites or gathered by the third parties that operate them.

14. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. If we make any material changes to the Policy, we will notify you via email, through a notification posted on the Services, or as required by applicable law. You can see when the Policy was last updated by checking the date at the bottom of this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective from when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, you can contact us at privacy@withtux.com.